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Amendments to the claims. 

Listing of all daims pursuant to 37 CFR 1121(c) 

This listing of claims will r^lace all prior versions, and listings, of claims in the 
application: 

L (Currently Amended) In an electronic mail (e-mail) system, a method for 
sending an e-mail message using a secured connection that eiT^)loys encryption, the 
method con^rising; 

receiving at a message transfer agent (MTA) a request from a client for 
establishing a secured connection with the MTA for sending an e-mail message; 

attempting to authenticate the client, through use of a certificat e, in order to 
identify the client as approved for establishing a secured connection with the MTA ; 

if the client cannot be authenticated, terminating the method without establishing 
the secured connection and without sending the e-mail message; 

if the client can be authenticated, establishing the secured connection between the 
client and the MTA; 

detemiining whether the encryption employed for the secured connection meets a 
predefined minimum encryption strength; 



if the encryption employed does not meet the predefined minimum encryption 
strength, terminating the secured connection without sending the e-mail message, 
whereupon the method terminates; and 

if the encryption employed does meet the predefined minimum encryption 
strength, sending the e-mail message. 

2. (Original) The method of claim 1, wherein said minimum encryption strength 
comprises a particular key length of a symmetric cipher used for encryption. 

3. (Original) The method of claim 1, wherein said step of terminating the method 
without establishing the secured connection includes: 

returning a temporary error reply code. 
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4. (Original) The method of claim 1 , wherein said step of terminating the method 
without establishing the secured connection includes: 

returning a permanent error r^ly code. 

5, (Original) The method of claim 1, wherein the e-mail message is returned to an 
original sender for the message if the client caimot be authenticated 

6* (Original) The method of claim 1. wherein the e-mail message is queued for 
future sending if the client cannot be authenticated 

?• (Original) The method of claim 1, wherein said step of determining whether 
the encryption employed for the secured connection meets a predefined minimum 
encryption strength employs SASL (Simple Authentication and Security Layer) protocol. 




8. (Original) The method of claim 1, wherein said client is remote from said e 
mail system. 



9. (Original) The method of claim 1, wherein said client includes a Mail User 

Agent 

10, (Currently Amended) The method of oloim IQ claim 9, wherein the Mail User 
Agent communicates with the e-mail system via SMTP (Simple Mail Transport Protocol). 

1 1 . (Original) The method of claim 1, wherein said MTA comprises a Sendmail- 
compatible Message Transfer Agent (MTA) and wherein said method is controlled, at 
least in part, by a configuration file for the Sendmail-compatible MTA* 

12, (Original) The method of claim 1, wherein said certificate comprises a signed 
public key. 
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13. (Original) The method of claim 1, wherein said certificate comprises an 
X.509 certificate. 

14. (Original) The method of claim 1, wherein said step of terminating the 
method without establishing the secured connection includes: 

rejecting at least some subsequent SMTP commands received from the client. 

15. (Original) The method of claim 14, wherein the rejected SMTP commands 
are rejected with an error. 

16. (Currently Amended) In an electronic mail (e-mail) system, a method for 
sending an e-mail message using a secured connection that en^loys encryption, the 
method coiiQ>rising; 

attempting at a first message transfer agent (MTA) to establish a secured 
connection with a second MTA for sending an e-mail message; 

attempting to authenticate the second MTA, through use of a certificat e, in order 
to identify the second MTA as approved for establishing a secured connection with the 
first MTA : 

if the second MTA cannot be authenticated, terminating the method without 
establishing the secured connection and without sending the e-mail message; 

if the second MTA can be authenticated, establishing the secured connection 
between the first MTA and the second MTA; 

determining whether the encryption employed for the secured connection meets a 
predefined minimum encryption strength; 

if the encryption employed does not meet the predefined minimum encryption 
strength, terminating the secured connection without sending the e-mail message, 
whereupon the method terminates; and 

if the encryption employed does meet the predefined minimum encryption 
strengthi sending the e-mail message. 
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17. (Original) The method of claim 16, wherein said minimum encryption 
strength comprises a paiticular key length of a symmetric cipher used for encryption. 

18* (Original) The method of claim 16, wherein said step of terminating the 
method without establishing the secured connection includes; 
returning a temporary error reply code, 

19* (Original) The method of claim 16, wherein said step of terminating the 
method without establishing the secured connection includes: 
returning a permanent error reply code. 

20. (Original) The method of claim 16, wherein the e-mail message is returned to 
an original sender for the message if the second MTA cannot be authenticated. 




21. (Original) The method of claim 16, wherein the e-mail message is queued for 
future sending if the second MTA cannot be authenticated. 



22. (Original) The method of claim 16, wherein said step of determining whether 
the encryption employed for the secured connection meets a predefined minimum 
encryption strength employs SASL (Simple Authentication and Security Layer) protocol. 

23. (Original) The method of claim 16, wherein said second MTA is remote from 
said e-mail system. 

24. (Original) The method of claim 16, wherein said first MTA originally 
received the e-mail message from a client that connects to the e-mail system using a Mail 
User Agent. 

25. (Original) The method of claim 24, wherein the Mail User Agent 
communicates with the e-mail system via SMTP (Simple Mail Transport Protocol). 
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26. (Original) The method of claim 16, wherein said first MTA con5)rises a 
Sendmail-compatible Message Transfer Agent (MTA) and wherein said method is 
controlled, at least in part, by a configuration file for the Sendmail -compatible MTA. 

27. (Original) The method of claim 16, wherein said certificate comprises a 
signed public key. 

28. (Original) The method of claim 16, wherein said certificate comprises an 
X.509 certificate. 

29. (Original) The method of claim 16, wherein the first MTA communicates 
with the second MTA using SMTP (Simple Mail Transport Protocol). 

30. (Original) The method of claim 29, wherein said step of terminating the 
method without establishing the secured connection includes: 

issuing an SMTP QUIT conunand 

31. (Currently Amended) An electronic mail (e-mail) system comprising: 
a message transfer agent (MTA) available for a client to connect to; 

program logic for authenticating the client, through use of a certificat e, in order to 
identify the client as approved for establishing a secured connection with the MTA: 

program logic for establishing a secured connection between the client and the 
MTA in instances where the client can be authenticated; 

program logic for testing encryption strength of the secured connection; and 

program logic for terminating the secured connection in instances where the 
secured connection has inadequate encryption strength. 

32. (Original) The system of claim 31, wherein the client includes Mail User 
Agent (MUA) software. 
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33* (Original) The system of claim 31, wherein the e-mail message is 
communicated to the MTA via SMTP (Simple Mail Transport Protocol). 

34. (Original) The system of claim 31, wherein said certificate comprises a signed 
public key. 

35* (Original) The system of claim 31, wherein said certificate comprises an 
X.509 certificate. 
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